Systems and methods for providing authentication to a plurality of devices

A non-transitory computer readable storage medium including instructions that, when executed by a processor, cause the processor to perform a method for a certificate authority system to provide authentication to a device associated with an organization, the method comprising:

• receiving, at the certificate authority system, a request from the device to sign authentication information of the device;
• sending a challenge to the device comprising a request to perform an action;
• receiving a response to the challenge from the device as a result of performing the action;
• verifying, by the certificate authority system, the response was correctly generated based on the challenge;
• analyzing a factor associated with the device, the factor comprising at least one of a location of the device, a role of a user of the device within the organization, one or more permissions associated with a user of the device, one or more privileges of the user within the organization, a type of device, and a purpose of the device;
• selecting, based on the analysis of the factor, a key from among a plurality of keys of the certificate authority system associated with a level of trust associated with the device, wherein the level of trust encompasses at least one of:
• a device permission level of the device within the organization, a user permission level of a user of the device, an operation permission level associated with a privilege available to the device for performing an operation within the organization, and an access permission level that establishes a privilege to a resource;
• and
• signing, in response to verifying the response and selecting the key, the authentication information of the device with at least the selected key of the certificate authority system as a certificate authority system authentication of an identity of the device that certifies the device as a trusted device having the level of trust when interacting with another device associated with the organization.

A certificate authority system, comprising:

• a memory to store a plurality of cryptographic keys of the certificate authority system;
• and
• a processor coupled with the memory, the processor configured to:
• receive a request from a device to sign authentication information of the device, wherein the device is associated with an organization;
• send a challenge to the device comprising a request to perform an action;
• receive a response to the challenge from the device as a result of performing the action;
• verify, by the certificate authority system, the response was correctly generated based on the challenge;
• analyze a factor associated with the device, the factor comprising at least one of a location of the device, a role of a user of the device within the organization, one or more permissions associated with a user of the device, one or more privileges of the user within the organization, a type of device, and a purpose of the device;
• select, based on the analysis of the factor, a key from among a plurality of keys of the certificate authority system associated with a level of trust associated with the device, wherein the level of trust encompasses at least one of:
• a device permission level of the device within the organization, a user permission level of a user of the device, an operation permission level associated with a privilege available to the device for performing an operation within the organization, and an access permission level that establishes a privilege to a resource;
• and
• sign, in response to verifying the response and selecting the key, the authentication information of the device with at least the selected key of the certificate authority system as a certificate authority system authentication of an identity of the device that certifies the device as a trusted device having the level of trust when interacting with another device associated with the organization.